城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.107.135.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.107.135.58. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 12:51:40 CST 2025
;; MSG SIZE rcvd: 107Host 58.135.107.214.in-addr.arpa. not found: 3(NXDOMAIN)
server can't find 214.107.135.58.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.126.90.89 | attackspambots | Apr 13 06:11:43 IngegnereFirenze sshd[22913]: User root from 118.126.90.89 not allowed because not listed in AllowUsers ... |
2020-04-13 16:43:24 |
| 218.16.121.2 | attackbotsspam | (sshd) Failed SSH login from 218.16.121.2 (-): 5 in the last 3600 secs |
2020-04-13 16:19:01 |
| 200.13.195.70 | attack | 2020-04-13T06:08:17.314298abusebot-7.cloudsearch.cf sshd[17867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 user=root 2020-04-13T06:08:18.991489abusebot-7.cloudsearch.cf sshd[17867]: Failed password for root from 200.13.195.70 port 51942 ssh2 2020-04-13T06:12:20.130208abusebot-7.cloudsearch.cf sshd[18178]: Invalid user saturnio from 200.13.195.70 port 59768 2020-04-13T06:12:20.134141abusebot-7.cloudsearch.cf sshd[18178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 2020-04-13T06:12:20.130208abusebot-7.cloudsearch.cf sshd[18178]: Invalid user saturnio from 200.13.195.70 port 59768 2020-04-13T06:12:21.836510abusebot-7.cloudsearch.cf sshd[18178]: Failed password for invalid user saturnio from 200.13.195.70 port 59768 ssh2 2020-04-13T06:16:18.096402abusebot-7.cloudsearch.cf sshd[18427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2 ... |
2020-04-13 16:37:58 |
| 112.3.30.37 | attack | Apr 13 08:22:56 odroid64 sshd\[12324\]: User root from 112.3.30.37 not allowed because not listed in AllowUsers Apr 13 08:22:56 odroid64 sshd\[12324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.30.37 user=root ... |
2020-04-13 16:46:48 |
| 190.42.26.153 | attackbotsspam | Unauthorized connection attempt detected from IP address 190.42.26.153 to port 5358 |
2020-04-13 16:23:23 |
| 14.244.146.103 | attackspam | Unauthorised access (Apr 13) SRC=14.244.146.103 LEN=52 TTL=108 ID=17944 DF TCP DPT=445 WINDOW=8192 SYN |
2020-04-13 16:32:10 |
| 103.74.111.59 | attack | Unauthorized connection attempt from IP address 103.74.111.59 on Port 445(SMB) |
2020-04-13 16:54:50 |
| 210.115.45.149 | attack | 1586767556 - 04/13/2020 15:45:56 Host: 210.115.45.149/210.115.45.149 Port: 23 TCP Blocked ... |
2020-04-13 16:57:08 |
| 45.133.99.14 | attackbotsspam | Apr 13 10:36:40 relay postfix/smtpd\[12963\]: warning: unknown\[45.133.99.14\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 13 10:38:44 relay postfix/smtpd\[6741\]: warning: unknown\[45.133.99.14\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 13 10:39:02 relay postfix/smtpd\[6741\]: warning: unknown\[45.133.99.14\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 13 10:45:38 relay postfix/smtpd\[14445\]: warning: unknown\[45.133.99.14\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 13 10:45:55 relay postfix/smtpd\[12549\]: warning: unknown\[45.133.99.14\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-13 16:58:08 |
| 68.183.219.43 | attack | Invalid user admin from 68.183.219.43 port 56032 |
2020-04-13 16:28:42 |
| 51.91.247.125 | attack | Scan ports |
2020-04-13 16:50:49 |
| 122.114.79.84 | attackspambots | [12/Apr/2020:23:53:57 -0400] clown.local 122.114.79.84 - - "POST /Admin1472b9cd/Login.php HTTP/1.1" 404 1236 [12/Apr/2020:23:53:59 -0400] clown.local 122.114.79.84 - - "GET /l.php HTTP/1.1" 404 705 [12/Apr/2020:23:54:00 -0400] clown.local 122.114.79.84 - - "GET /phpinfo.php HTTP/1.1" 404 705 ... |
2020-04-13 16:21:33 |
| 77.79.132.10 | attackspambots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-13 16:55:20 |
| 80.82.78.100 | attackbots | 80.82.78.100 was recorded 15 times by 11 hosts attempting to connect to the following ports: 998,1023. Incident counter (4h, 24h, all-time): 15, 60, 24336 |
2020-04-13 16:45:48 |
| 222.186.52.139 | attack | Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139 Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139 Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139 Apr 13 10:18:41 dcd-gentoo sshd[18055]: Failed keyboard-interactive/pam for invalid user root from 222.186.52.139 port 55814 ssh2 ... |
2020-04-13 16:19:52 |